$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json) Hash identifier: 5hQevnzwm0xVOE3CpTJ0oxaCaUD1+mQA6+yF5FpjtX0= Subject key identifier: F2:0C:6C:C5:47:6D:FB:9E:8A:C7:8B:4E:DD:BA:BA:86:23:A1:CD:32 Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Certificate serial: 118A7E8D9AA12150A2F312E6BD92AF1F601FC380 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft Manifest number: C6 Signing time: Mon 28 Sep 2026 12:25:02 +0000 Manifest this update: Mon 28 Sep 2026 12:20:02 +0000 Manifest next update: Tue 29 Sep 2026 16:19:02 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=) 2: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: IR0sr70uSKAndAjrLAmbeIYJMe64tjjII4Vg/RyR0R0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8a:7e:8d:9a:a1:21:50:a2:f3:12:e6:bd:92:af:1f:60:1f:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Validity Not Before: Sep 28 12:20:02 2026 GMT Not After : Sep 29 16:19:02 2026 GMT Subject: CN=F20C6CC5476DFB9E8AC78B4EDDBABA8623A1CD32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:40:38:e0:a2:bd:09:3b:d1:64:3c:96:f4: 1b:48:34:64:09:a1:a9:11:62:8e:ce:38:c1:e5:e8: fc:58:42:8f:a1:d6:5d:93:a8:3a:53:82:be:69:5e: 3f:47:59:0c:5b:cf:a4:b0:6d:63:d7:78:f5:a4:3f: 1d:3a:e2:dd:10:b2:b0:da:ec:82:26:7d:62:8f:11: 17:2a:c2:69:56:99:c8:57:24:b7:37:fc:3e:d3:8f: 1a:54:91:5b:ec:52:29:8d:d9:55:15:d6:2b:2a:4d: a6:0f:0d:0e:9f:48:5a:01:e6:ca:8c:0a:a4:ee:0a: 7d:a8:ac:61:e7:19:e3:3b:a4:f2:86:93:95:ac:e8: 3c:70:47:67:55:5b:73:2e:03:d6:1d:e5:3c:d1:83: 4f:55:e4:60:5c:91:a4:5c:07:71:d0:63:35:aa:a5: fd:fd:a2:6e:2c:92:7a:36:34:eb:fd:01:73:55:b0: 77:8f:86:61:c5:70:04:d5:d4:20:b5:0b:9b:e9:07: 9d:4b:f1:26:ef:c9:69:da:3e:1e:8b:92:39:fd:3d: 3f:e8:b7:65:67:d9:41:fb:20:62:aa:1f:c5:3e:fa: b3:86:a0:c5:13:6e:0c:5d:df:a6:5f:5e:83:3d:ff: ba:2b:b8:a5:a9:6e:4f:ac:1e:6d:7f:73:e7:83:0e: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:6C:C5:47:6D:FB:9E:8A:C7:8B:4E:DD:BA:BA:86:23:A1:CD:32 X509v3 Authority Key Identifier: keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2e:d4:78:44:74:f9:d3:44:2c:00:1b:23:2e:32:35:fd:00: 53:cc:88:66:2e:3b:20:80:e0:f0:73:76:7f:22:b5:8a:83:bf: 33:ad:90:8e:44:ac:fa:2c:9d:48:67:72:5b:b9:da:c4:47:a9: 62:f0:da:31:46:b1:9f:88:e0:06:1a:9c:cb:90:f5:87:a6:b2: 98:1b:b0:42:76:11:f7:26:2e:45:60:98:4b:ca:1e:72:96:ca: 09:c3:23:2c:20:56:78:93:4c:2f:0e:d9:6a:3e:a3:d3:90:ab: da:c8:fc:7e:70:36:62:70:fe:4c:6b:6f:ea:a8:16:54:67:39: 41:a7:c5:ea:52:1b:2e:e9:cf:31:3e:e4:e8:da:c7:86:54:ed: 9c:b5:f9:cd:e0:13:2e:5f:5d:ff:94:11:bf:89:a5:18:89:c0: f3:da:d0:d0:a8:af:58:15:5a:48:2a:5b:06:b6:66:4a:c8:1c: 2a:84:59:1e:e4:1c:a9:ac:8c:d3:98:6a:1f:88:39:1a:78:3e: b7:37:62:14:19:cd:e3:a6:44:b0:79:b8:5d:3b:3f:e8:b6:97: 81:74:a8:0b:5b:ff:d9:91:a3:67:8f:2b:86:59:ad:23:be:af: 07:83:1d:a6:f9:7a:ca:53:1f:64:38:5b:47:dc:71:99:f4:02: 08:f7:53:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYp+jZqhIVCi8xLmvZKvH2Afw4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2 MzY5MjJBMzAeFw0yNjA5MjgxMjIwMDJaFw0yNjA5MjkxNjE5MDJaMDMxMTAvBgNV BAMTKEYyMEM2Q0M1NDc2REZCOUU4QUM3OEI0RUREQkFCQTg2MjNBMUNEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNkA44KK9CTvRZDyW9BtINGQJ oakRYo7OOMHl6PxYQo+h1l2TqDpTgr5pXj9HWQxbz6SwbWPXePWkPx064t0QsrDa 7IImfWKPERcqwmlWmchXJLc3/D7TjxpUkVvsUimN2VUV1isqTaYPDQ6fSFoB5sqM CqTuCn2orGHnGeM7pPKGk5Ws6DxwR2dVW3MuA9Yd5TzRg09V5GBckaRcB3HQYzWq pf39om4skno2NOv9AXNVsHePhmHFcATV1CC1C5vpB51L8SbvyWnaPh6Lkjn9PT/o t2Vn2UH7IGKqH8U++rOGoMUTbgxd36ZfXoM9/7oruKWpbk+sHm1/c+eDDiShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8gxsxUdt+56Kx4tO3bq6hiOhzTIwHwYDVR0j BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3 Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEku1HhEdPnTRCwAGyMuMjX9AFPMiGYuOyCA 4PBzdn8itYqDvzOtkI5ErPosnUhnclu52sRHqWLw2jFGsZ+I4AYanMuQ9Yemspgb sEJ2EfcmLkVgmEvKHnKWygnDIywgVniTTC8O2Wo+o9OQq9rI/H5wNmJw/kxrb+qo FlRnOUGnxepSGy7pzzE+5Ojax4ZU7Zy1+c3gEy5fXf+UEb+JpRiJwPPa0NCor1gV WkgqWwa2ZkrIHCqEWR7kHKmsjNOYah+IORp4Prc3YhQZzeOmRLB5uF07P+i2l4F0 qAtb/9mRo2ePK4ZZrSO+rweDHab5espTH2Q4W0fccZn0Agj3U3E= -----END CERTIFICATE-----Generated at Mon Sep 28 19:12:16 2026 by rpki-client